---
title: "Do I need to change my browser settings?"
canonical: "https://www.techtime-initiative.com/space/EasySSO/3276970/Do%20I%20need%20to%20change%20my%20browser%20settings%3F"
format: markdown
---
Yes, but usually only while testing on a new/temporary test VM/host that is not yet recognised by the browser as being in the Intranet Security Zone.

If you need to add a host to the Intranet Security Zone permanently in a way that applies to all clients/browsers - please follow these instructions: [Group Policy Local Intranet Zone](https://techtime-website.atlassian.net/wiki/spaces/EasySSO/pages/3277032).

## Internet Explorer and Google Chrome

> ℹ️ Google Chrome will work once Internet Explorer is working since Chrome takes its settings from Internet Explorer.

Internet Explorer will only allow transparent Single Sign-On to the sites it recognizes as Intranet sites. In production, adding a site to the Intranet sites list is usually done via group policy, but while you test you may need to do it manually.

If you get a credentials popup (a.k.a. Windows Domain popup) while trying to access Jira hit Esc (it should revert to the login page) and verify that the site is recognized as an Intranet site. If the site is not recognized as an Intranet site add it manually. Close all IE windows, reopen them, and try again.  
If you still receive the login popup please review the Jespa logs (at the location you've specified in the config) and search for an error message there. Feel free to send this to our support email (at the bottom of this website), we are here to help!

## Firefox with NTLM

Firefox requires manual configuration for NTLM:

1. Type about: config in the address bar.
2. Confirm that you are aware of the risks of changing the browser configuration
3. Type "ntlm" (without quotes) in the search bar - several parameters will be displayed.
4. Add your host to the list of **network.automatic-ntlm-auth.trusted-uris**, and use commas to separate hosts if required.

## Firefox with Kerberos

Firefox requires manual configuration for Kerberos:

1. Type about: config in the address bar.
2. Confirm that you are aware of the risks of changing the browser configuration
3. Type "negotiate" (without quotes) in the search bar - several parameters will be displayed.
4. Add your host to the list of **network.negotiate-auth.trusted-uris**, and use commas to separate hosts if required.